aboutsummaryrefslogtreecommitdiff
path: root/sys/security/mac_bsdextended
Commit message (Expand)AuthorAgeFilesLines
* MFC r189590Christian S.J. Peron2009-03-201-2/+2
* MFC:Bjoern A. Zeeb2009-02-071-0/+1
* Merge r184367 from head to stable/7:Robert Watson2008-11-291-0/+5
* Merge r181069 from head to stable/7:Robert Watson2008-08-311-11/+8
* Modify MAC policy function names and local variables in a manner similarRobert Watson2008-08-021-128/+127
* Rename mac_check_vnode_delete() MAC Framework and MAC Policy entryRobert Watson2007-09-101-14/+14
* In preparation for 7.0 privilege cleanup, clean up style:Robert Watson2007-07-052-87/+32
* Include priv.h to pick up suser(9) definitions, missed in an earlierRobert Watson2007-06-131-0/+1
* Apply variable name normalization to MAC policies: adopt global conventionsRobert Watson2007-04-231-32/+35
* Allow MAC policy modules to control access to audit configuration systemRobert Watson2007-04-211-0/+27
* More unnecessary include reduction.Robert Watson2007-02-231-17/+2
* Move mapping of MBI_APPEND to MBI_WRITE from inside the rule loop inRobert Watson2007-02-201-9/+8
* Continue 7-CURRENT MAC Framework rearrangement and cleanup:Robert Watson2007-02-061-1/+0
* Move src/sys/sys/mac_policy.h, the kernel interface between the MACRobert Watson2006-12-221-2/+1
* Sweep kernel replacing suser(9) calls with priv(9) calls, assigningRobert Watson2006-11-061-0/+3
* Add some new options to mac_bsdestended. We can now match on:David Malone2006-04-232-35/+210
* Create a mac_bsdextended_check_vp function that takes a cred, aDavid Malone2006-03-041-280/+43
* Fix potential overrun of static stack allocated array which storesChristian S.J. Peron2006-01-151-1/+1
* If a "hole" opens up in the ruleset (i.e.: remove 5), do not returnTom Rhodes2005-07-281-5/+2
* Add locking support to mac_bsdextended:Tom Rhodes2005-04-221-37/+67
* Minor white space synchronization and line wrapping.Robert Watson2004-10-221-0/+1
* Bump copyright dates for NETA on these files.Robert Watson2004-10-212-2/+2
* Modify mac_bsdextended policy so that it defines its own vnode accessRobert Watson2004-10-212-33/+74
* Remove the debugging tunable, it was not being used.Tom Rhodes2004-09-101-10/+1
* Allow mac_bsdextended(4) to log failed attempts to syslog's AUTHPRIVTom Rhodes2004-08-211-5/+19
* Give the mac_bsdextended(4) policy the ability to match and apply on a firstTom Rhodes2004-08-211-2/+21
* Allow an effective uid of root to bypass mac_bsdextended rules; the MACRobert Watson2004-07-231-0/+3
* Update my personal copyrights and NETA copyrights in the kernelRobert Watson2004-02-222-4/+4
* Implementations of mpo_check_vnode_deleteextattr() andRobert Watson2003-08-211-1/+35
* Remove trailing whitespace.Robert Watson2003-07-051-3/+3
* Trim "trustedbsd_" from the front of the policy module "short names";Robert Watson2003-03-271-1/+1
* Expand scope of the BSD extended "file system firewall" policy toRobert Watson2003-03-251-0/+17
* Back out M_* changes, per decision of the TRB.Warner Losh2003-02-191-1/+1
* Remove M_TRYWAIT/M_WAITOK/M_WAIT. Callers should use 0.Alfred Perlstein2003-01-211-1/+1
* Map VAPPEND to VWRITE since the ugidfw rule syntax doesn't specificallyRobert Watson2002-12-281-0/+9
* Update MAC modules for changes in arguments for exec MAC policyRobert Watson2002-11-081-1/+2
* Update policy modules for changes in arguments associated with supportRobert Watson2002-11-051-1/+1
* License and wording updates: NAI has authorized the removal of clauseRobert Watson2002-11-042-14/+8
* Move to C99 sparse structure initialization for the mac_policy_opsRobert Watson2002-10-301-55/+28
* Various minor type, prototype tweaks -- clean up cruft due to lack ofRobert Watson2002-10-301-2/+2
* While 'mode_t' seemed like a good idea for the access mode argument forRobert Watson2002-10-301-5/+5
* Merge implementation of mpo_check_vnode_link() for various appropriateRobert Watson2002-10-051-0/+29
* Pass active_cred and file_cred into the MAC framework explicitlyRobert Watson2002-08-191-4/+5
* Introduce support for Mandatory Access Control and extensibleRobert Watson2002-07-312-0/+809